Privacy Policy

For personal data about our own customers and website visitors, Hospitality Mentors Inc is the data controller. For customer content that a workspace uploads about its own employees and operations, the customer organization is the controller and MentoCore acts as a processor under our Data Processing Agreement.

Contact for privacy matters: privacy@hospitalitymentors.net · Hospitality Mentors Inc, New York, NY, United States

• Account data — name, email address, organization, role, optional phone number for SMS reminders.
• Customer content — inspections, corrective actions, incidents, SOPs, training records, schedules, traceability lots, uploaded photos and files.
• Device & telemetry data — sensor readings your organization connects, push subscription tokens, and offline drafts stored in your own browser.
• Operational logs — request logs, email and notification delivery records, and audit events describing who did what in the app.

We do not sell personal data, and we do not use customer content to train third-party AI models.

• Contract — to provide the service you or your employer subscribed to.
• Legitimate interests — keeping the platform secure, preventing abuse, improving reliability, and supporting customers.
• Legal obligation — retaining records where law requires it and responding to lawful requests.
• Consent — optional channels such as SMS reminders and marketing email, which you can withdraw at any time.

Some features send the content you submit (for example a checklist draft prompt or an inspection photo) to our AI provider to generate a response. Prompts are processed to return your result and are not used to train the provider's models. AI output is a draft: a human reviews and approves it inside the product.

Depending on where you live you may have the right to access, correct, export, delete, or restrict processing of your personal data, and to object or lodge a complaint with a supervisory authority. You can exercise the two most common rights yourself, without contacting us:

• Export — Settings → Privacy & data → Export my data downloads a machine-readable JSON copy of your records.
• Deletion — Settings → Privacy & data → Delete my account schedules permanent deletion after a 30-day grace period, during which you can cancel.

For anything else, email privacy@hospitalitymentors.net. We respond within 30 days.

We share data only with the sub-processors listed on our sub-processor page, each bound by a written agreement. Where data moves outside the EEA or UK, transfers rely on Standard Contractual Clauses.

Data is encrypted in transit with TLS and stored in a managed Postgres database with row-level security enforced per organization. See our security page and trust page for details.

MentoCore is a workplace tool and is not directed to anyone under 16.

We update this policy as the product changes and revise the date below. Material changes are announced in-app or by email to workspace owners.